ZeeAdbox v2x SQL Injection Vulnerability

vendor:

ZeeAdbox

by:

SONiC

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: ZeeAdbox

Affected Version From: ZeeAdbox v1.1

Affected Version To: ZeeAdbox v2x

Patch Exists: N/A

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

ZeeAdbox v2x SQL Injection Vulnerability

OManage Your Advertisers With Complete Ease Using ZeeAdBox v1.1- All-In-One Powerful Banner & Text Ad Solution. Offer a wide range of Advertising spaces on your website. Have your own banner ads/text ads rotating system on your web pages. A demonstration of the vulnerability can be found at http://www.site.com/bannerclick.php?bnnnerid=11

Mitigation:

Input validation and sanitization should be used to prevent SQL injection attacks.

Source

Exploit-DB raw data:

=======================================================
ZeeAdbox v2x SQL Injection Vulnerability
=======================================================

Name : ZeeAdbox v2x -SQL iNj3cti0n Vulnerabilty
Date : july 23,2010
Critical Level :VERY HIGH
vendor URL :?? http://www.zeeways.com

#######################################################################################################


Author : ..::[ SONiC ]::.. aka ~the_pshyco~ <sonicdefence[at]gmail.com>

Special thanks to : Sid3^effects,r0073r (inj3ct0r.com),L0rd CruSad3r,M4n0j,MA1201,D3aD F0x

Greetz to :www.topsecure.net, iNj3cT0r.com, www.andhrahackers.com

Special Shoutz : H***** [my Girl Frnd] [Elite .NET Programmer]

#######################################################################################################
Description:

OManage Your Advertisers With Complete Ease Using ZeeAdBox v1.1- All-In-One Powerful Banner & Text Ad Solution. Offer a wide range of Advertising spaces on your website. Have your own banner ads/text ads rotating system on your web pages.

#######################################################################################################
Xploit :SQL iNj3cti0n Vulnerabilty

DEMO URL? http://www.site.com/bannerclick.php?bnnnerid=11 [ SQL i ]

###############################################################################################################

# ..::[ SONiC ]::.. aka the_pshyco